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Uncertainty relations provide one of the most pow- 
erful formulations of the quantum mechanical prin- 
ciple of complementarity. Yet, very little is known 
about such uncertainty relations for more than two 
measurements. Here, we show that sufficient unbi- 
asedness for a set of binary observables, in the sense 
of mutual anti-commutation, is good enough to obtain 
maximally strong uncertainty relations in terms of the 
Shannon entropy. We also prove nearly optimal rela- 
tions for the collision entropy. This is the first system- 
atic and explicit approach to finding an arbitrary num- 
ber of measurements for which we obtain maximally 
strong uncertainty relations. Our results have imme- 
diate applications to quantum cryptography 

Uncertainty relations lie at the very core of quantum me- 
chanics. For any observable, it only has sharp values (in 
the sense that the measurement outcome is determin- 
istic) for its own eigenstates. However, for any other 
state, the distribution of measurement outcomes is more 
or less smeared out, or more conveniently expressed: its 
entropy is is strictly positive. Hence, if two or more ob- 
servables have no eigenstates in common, the sum of 
these respective entropies is strictly greater than for 
any state we may measure. We thereby say that a set 
of observables is more "incompatible" than another, if 
this sum takes on a larger value. But what makes ob- 
servables more "incompatible"? Or rather, what char- 
acterizes maximally "incompatible" observables? Here, 
we show how to obtain maximally strong uncertainty 
relations for a large number of binary observables that 
exhibit simple geometrical properties. 

Uncertainty relations are most well-known in the 
form proposed by Heisenberg [lj and generalized by 
Robertson [2 J. Entropic uncertainty relations are an al- 
ternative way to state Heisenberg's uncertainty princi- 
ple. They are frequently a more useful characterization, 
because the "uncertainty" is lower bounded by a quan- 
tity that only depends on the eigenstates of the observ- 
ables, and not on the actual physical quantity to be mea- 
sured |3 4], as in Heisenberg's formulation with stan- 
dard deviations - see also the more recent paper |5]. Fol- 
lowing a conjecture by Kraus [6], Maassen and Uffink [7J 
proved an entropic uncertainty relation for two observ- 
ables. In particular, they showed that if we measure any 
state p 6 Ti with dim7i = d using observables with 
eigenbases A = . . . , \a d )} and B = . . . , \b d )} 



respectively, we have 

l -{H{A\p) + H{B\ P ))>-\ogc{A,B), 

where c(A,B) = max{|(a|fr)| : \a) e A,\b) e B} and 

H(A\p) = - X«=i( a j|/°l a *) log(ai|p|aj) is the Shannon 
entropy arising from measuring the state p in basis A. 
Here, the most "incompatible" measurements arise from 
choosing A and B to be mutually unbiased bases (MUB). 
That is, for any \a) € A and any \b) € B we have | (a\b) \ = 
1 / \[d, giving us a lower bound of \ log d. Clearly, this 
bound is tight: Choosing p = \ai)(ai\ for |a.j) 6 A gives 
us exactly | log d, with maximum uncertainty for one of 
the two observables and none for the other. 

But how about more than two observables? Sadly, 
very little is known about this case so far. Yet, this ques- 
tion not only eludes our current understanding of quan- 
tum mechanics, but also has practical consequences for 
quantum cryptography in the bounded storage model, 
where proving the security of protocols ultimately re- 
duces to finding such relations |8|. Proving new en- 
tropic uncertainty relations could thus give rise to new 
protocols. Furthermore, uncertainty relations for more 
than two measurements could also be useful to under- 
stand other quantum effects that are derived from such 
relations, such as locking classical information in quan- 
tum states [9j. Sanchez-Ruiz [10 11 12J has shown that 
for a full set of d + 1 MUBs Ai , . . . , Ad+i, we have 

^XW>lo S (^), 
j=i 

and for d = 2 gave a lower bound of 2/3. Indeed, strong 
uncertainty relations for a smaller number of bases do 
exist. If we choose a set T of (log d) A bases uniformly at 
random, then (with high probability) we have that for all 
states p: t= >~2bet H{&\p) — l°g^ — 3 1131 . This means 
that there exist (log d) 4 bases for which the sum of en- 
tropies is very large, i.e., measurements in such bases 
are very incompatible. However, no explicit construc- 
tions are known. It may be tempting to conjecture that 
simply choosing our measurements to be mutually un- 
biased leads to strong uncertainty relations in general. 
In fact, when choosing bases at random they will be al- 
most mutually unbiased. In this case, we might expect 
the entropy average to be quite large: if the state to be 
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measured is an eigenstate of one of the bases, the corre- 
sponding entropy average will be ^1 — -pj=j^ logd. This 
value is thus clearly an upper bound on the minimum 
entropy average min^ J2bgT H(&\p) ror an y se * °f 
bases, mutually unbiased or not. Perhaps surprisingly, 
however, choosing the bases to be mutually unbiased is 
not the right property: there exists up to \T\ < \fd mutu- 
ally unbiased bases for which min p yf^J^BeT^i^lp) = 
|loge? |14|. Note that the right hand side is a lower 
bound for any set of MUBs, since it is the average of 
pairs of entropies to which we can apply the uncer- 
tainty relation by Maassen and Uffink [7j. Hence we 
call this the trivial lower bound. When considering en- 
tropic uncertainty relations as a measure of "incompati- 
bility", we must thus look for different properties to ob- 
tain strong uncertainty relations. But, what properties 
lead to strong entropic uncertainty relations for more 
than two observables? 

Here, we show that for binary observables we obtain 
maximally strong uncertainty relations for the Shan- 
non entropy if they satisfy the property that they anti- 
commute. We also obtain a nearly optimal uncertainty 
relation for the collision entropy (Renyi entropy of order 
2) H 2 {X) = -logJ2 x Px(x) 2 that is of particular rele- 
vance to cryptography. As we will see, we can take the 
anti-commuting observables to have a particularly sim- 
ple form that in principle allows us to apply our result to 
quantum cryptography using present-day technology. 

CLIFFORD ALGEBRA 

For our result we will make use of the structure of 
Clifford algebra |[T5l Il6l U7\ , which has many beautiful 
geometrical properties of which we shall use a few. For 
any integer n, the free real associative algebra generated 
by Ti, . . . , T 2n , subject to the anti-commutation relations 

{Tj, r k } = r,r fc + = 2<5 Jfc i, (l) 

is called Clifford algebra. We briefly recall its most essen- 
tial properties that we will use in this text. The Clifford 
algebra has a unique representation by Hermitian ma- 
trices on n qubits (up to unitary equivalence) which we 
fix henceforth. This representation can be obtained via 
the famous Jordan- Wigner transformation ] 18 ] : 

for j = 1 , . . . , n, where we use X, Y and Z to denote the 
Pauli matrices. 

Let us first consider these operators themselves. Evi- 
dently, each operator Ti has exactly two eigenvalues ±1: 
Let \rj) be an eigenvector of T; with eigenvalue A. From 



r? = 1 we have that A 2 = 1. Furthermore, we have 
r^(rj |?7)) = — \Tj\r]). We can therefore express each Ti 
as 

v ■ — r° — r 1 

where T° and Tj are projectors onto the positive and 
negative eigenspace of I\ respectively. Furthermore, 
note that we have for i ^ j 

That is, all such operators are orthogonal. Hence, the 
positive and negative eigenspaces of such operators are 
similarly mutually unbiased than bases can be: we have 
that for all i ^ j 

Tr^rO) = Tr^r}). 

The crucial aspect of the Clifford algebra that makes 
it so useful in geometry is that we can view the opera- 
tors Ti , . . . , T2n as 2n orthogonal vectors forming a basis 
for R 2 ™. Each vector a = (ai, . . . , a 2n ) G R 2n can then 
be written as a = J^j a j^j- Note that the inner prod- 
uct of two vectors obeys a ■ b = J2j a jbj^ = W,b}/2, 
where ab is the Clifford product which here is just equal 
to the matrix product. Hence, anti-commutation takes a 
geometric meaning within the algebra: two vectors anti- 
commute if and only if they are orthogonal. Evidently, 
if we now transform the generating set of Tj linearly to 
obtain the new operators 

3 

then the set {1^ , . . . , T' 2n } satisfies the anti -commutation 
relations iff (Tjk)jk is an orthogonal matrix: these are ex- 
actly the operations which preserve the inner product. 
Because of the uniqueness of representation, there exists 
a matching unitary U(T) of H which transforms the op- 
erator basis on the Hilbert space level, by conjugation: 

T^ = U(T)rjU(Ty. 

Essentially, we can think of the positive and negative 
eigenspace of such operators as the positive and neg- 
ative direction of the basis vectors. We can visualize 
the 2n basis vectors with the help of a 2n-dimensional 
hypercube. Each basis vector determines two oppos- 
ing faces of the hypercube, where we can think of the 
two faces as corresponding to the positive and negative 
eigenspace of each operator. Note that the face of an 
2n-dimensional hypercube is a 2n — 1 dimensional hy- 
percube itself. 

It will be particularly useful that the collection of op- 
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FIG. 1: 2-cube, corresponding to n — 1. 




FIG. 2: 4-cube, corresponding to n — 2. 



erators 



(<7i, ■ ■ ■ ,92n) in this expansion are called "vector" com- 
ponents, the ones belonging to degree k > 1 products of 
r's are "tensor" or fc-vector components, fc-vectors also 
have very nice geometric interpretation within the alge- 
bra: they represent oriented plane and higher volume 
elements. The - unique - coordinate Tq of degree 2n 
also plays special role (it corresponds to the volume ele- 
ment in M. 2n ), and is called the "pseudo-scalar" compo- 
nent. Note that it anti-commutes with all the 1^, which 
has another important consequence: Substituting T for 
any of the Tj again yields a generating set of the Clif- 
ford algebra, hence there exists a unitary on H taking 
the original to the new basis by conjugation. 

The vector and pseudo-scalar components of the Clif- 
ford algebra span a (2n + 1) -dimensional space isomor- 
phic to M. 2n+1 : indeed, extending the 0(2n) symmetry of 
span{Ti, . . . , T 2 „}, the extended span{r , r i} . . . , r 2 „} 
has the symmetry of SO(2ra + 1): for every special- 
orthogonal (2n + 1) x (2n + 1) matrix T, we can write 
transformed Clifford operators T' k = z~2j=o Tjk^j obey- 
ing the anti-commutation relations. As before (but now 
this requires an additional proof that we provide in the 
appendix using the condition detT = 1), there exists 
a unitary U(T) of the underlying Hilbert space Ti such 
that for all j = 0, . . . , 2n, T' 3 = U(f )TjU(f )t. 

Using the orthogonal group symmetry of the Clifford 
algebra, we show the following lemma in the appendix. 



T, (1 < j < 2n) 
I> = iTjTk (1 < j < k < 2n) 

T m = rj-r fc r £ (i < j < k < i < 2n) 



r 



12. ..(2n) 



= iTiT 2 ■ ■ - T 2n =■ T c 



form an orthogonal basis for the d x d complex matrices 
for d = 2™, again by the anti-commutation relations. By 
counting, the above operators form a complete operator 
basis with respect to the Hilbert-Schmidt inner product. 
Notice that the products with an odd number of factors 
are Hermitian, while the ones with an even number of 
factors are skew-Hermitian, so in the definition of the 
above operators we introduce a factor of i to all with an 
even number of indices to make the whole set a real ba- 
sis for the Hermitian operators. Working out the above 
terms using the representation from above, we can see 
that this gives us the familiar Pauli basis consisting of 



elements B] 



J5™ withBj e {t,X,Y,Z}. 



Hence we can write every state p on H as 



\ 3 j<k 



(2) 



This expansion has been used before in quantum infor- 
mation theory, see e.g. 1 17]. The (real valued) coefficients 



Lemma 1 The linear matt P taking p as in eq. to 



(3) 



is positive. I.e., if p is a state, then so is V(p), and in this case 
Ei=o 9j < 1- Conversely, ifY^od 2 ] < l > then 



is positive semidefinite, hence a state. 

It is interesting to note that the map P is positive, but not 
completely positive, for any n > 1, as one can see straight- 
forwardly by looking at it's Choi-Jamiolkowski opera- 
tor. 



APPLICATIONS 

We now first use the tools from above to prove a 
"meta"-uncertainty relation, from which we will then 
derive two new en tropic uncertainty relations. Evi- 
dently, we have immediately from the above that 
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Lemma 2 Let p e H with dim H = 2™ be a quantum state, 
and consider K < 2n + 1 anti-commuting observables Tj as 
defined above. Then, 



K-l 2n 
v 2 



3=0 3=0 



a 



Our result is essentially a generalization of the Bloch 
sphere picture to higher dimensions (see also [17]): For 
n = 1 (d = 2) the state is parametrized by p = ^(1 + 
9iTi + ,g 2 r 2 + .g r ) where T l =X,T 2 = Z and Tq = F 
are the familiar Pauli matrices. Lemma |2] tells us that 
9q + Si +92 — 1' i- e -' the state must lie inside the Bloch 
sphere. Our result may be of independent interest, since 
it is often hard to find conditions on the coefficients 
gi , 52 , • • • such that p is a state. 

Notice that the gj = Tr (pTj) are directly interpreted 
as the expectations of the observables Tj. Indeed, gj is 
precisely the bias of the ±1 -variable Tj: 



Pr{r- = = 



Hence, we can interpret Lemma [2] as a form of uncer- 
tainty relation between the observables Tj: if one or 
more of the observables have a large bias (i.e., they 
are more precisely defined), this limits the bias of the 
other oberservables (i.e., they are closer to uniformly 
distributed). 

Indeed, Lemma [2] has strong consequences for the 
Renyi and von Neumann entropic averages 



K-l 



^E^( r » 



3=0 



where H a (Tj | p) is the Renyi entropy at a of the probabil- 
ity distribution arising from measuring the state p with 
observable Tj . The minima of such expressions can be 
interpreted as giving entropic uncertainty relations, as 
we shall now do for a = 2 (the collision entropy) and 
a = 1 (the Shannon entropy). 



Theorem 3 Let dimH = 2™, and consider K < 2n 
anti-commuting observables as defined above. Then, 



1 K ~ 1 

P 3=0 



1 - log 1 



1 

K 



loge 
K ' 



where H 2 {Tj\p) = -log^]be{o.i} Tr ( r iP) 2 ' and the mini- 
mization is taken over all states p. The latter holds asymptot- 
ically for large K. 



Proof Using the fact that Y h j = (t+ (-l) f T j )/2 we can 



first rewrite 

K-l 

K 



(l + Ti'O^) 2 ) 



=0 

(^l 1(1+9?) ) 



> - log 



>l-log (l + i 



where the first inequality follows from Jensen's inequal- 
ity and the concavity of the log, and the second from 
Lemma [2] Clearly, the minimum is attained if all gj — 

Ti(pTj) — \p^- It follows from Lemma |lj that our in- 
equality is tight. Via the Taylor expansion of log (l + -4) 
we obtain the asymptotic result for large K. □ 
For the Shannon entropy (a = 1) we obtain something 
even nicer: 

Theorem 4 Let dim TL = 2™, and consider K < 2n + 1 
anti-commuting observables as defined above. Then, 

1 K ^ 1 
min— V HCTAp) = 1 , 

3=0 

where H(T 3 \p) = - E 6e{0 ,i} Tl '( r » logTr^p), and the 
minimization is taken over all states p. 

Proof To see this, note that by rewriting our objective 
as above, we observe that we need to minimize the ex- 
pression 



K-l 



is* 



3=0 

subject to V . tj < 1 and tj > 0, via the identification 
tj = (Tr(pTj)) 2 . An elementary calculation (included 
in the appendix for completeness) shows that the func- 
tion / (t) = H is concave in t e [0; 1]. Hence, 

by Jensen's inequality (read in the opposite direction), 
the minimum is attained with all the tj being extremal, 
i.e. one of the tj is 1 and the others are 0, giving just the 
lower bound of 1 — -k. □ 

It is clear that based on Lemma [T] one can derive 
similar uncertainty relations for other Renyi entropies 
(a 1 , 2) by performing the analogous optimization. 
We stuck to the two values above as they are the most 
relevant in view of the existing literature; for example, 
using the same convexity arguments as for a = 2, we 
obtain for a = oo, 



1 K - 1 

-Y 

K ^ 

3=0 



ffoo(r»>i-io g i 



IK, 
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This should be compared to Deutsch's inequality [4J for 
the case of two mutually unbiased bases of a qubit, be- 
cause the latter really is about H^. 
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DISCUSSION 

We have shown that anti-commuting Clifford observ- 
ables obey the strongest possible uncertainty relation for 
the von Neumann entropy. It is interesting that in the 
process of the proof, however, we have found three un- 
certainty type inequalities (the sum of squares bound, 
the bound on H 2 , and finally the bound on Hi), and 
all three have a different structure of attaining the limit. 
The sum of squares bound can be achieved in every di- 
rection (meaning for every tuple satisfying the bound 
we get one attaining it by multiplying all components 
by some appropriate factor), the H 2 expression requires 
all components to be equal, while the H\ expression de- 
mands exactly the opposite. 

Our result for the collision entropy is slightly subop- 
timal but strong enough for all cryptographic purposes. 
Indeed, one could use our entropic uncertainty relation 
in the bounded quantum storage setting to construct, for 
instance, 1-out-of-i-T oblivious transfer protocols analo- 
gous to [8] . Here, instead of encoding a single bit into ei- 
ther the computational or Hadamard basis, which gives 
us a l-out-of-2 oblivious transfer, we now encode a sin- 
gle bit into the positive or negative eigenspace of each of 
these K operators. It is clear from the representation of 
such operators discussed earlier, that such an encoding 
can be done experimentally as easily as encoding a sin- 
gle bit into three mutually unbiased basis given by the 
Pauli operators X, Y and Z. Indeed, our construction 
can be seen as a direct extension of such an encoding: 
we obtain the uncertainty relations for these three MUBs 
used in |8], previously proved by Sanchez-Ruiz iTTOirTTl , 
as a special case of our analysis for K = 3 (d = 2). 

Alas, strong uncertainty relations for measurements 
with more than two outcomes remain inaccessible to 
us. It has been shown [19J that uncertainty relations 
for more outcomes can be obtained via a coding argu- 
ment from uncertainty relations as we construct them 
here. Yet, these seem far from optimal. A natural choice 
would be to consider the generators of a generalized 
Clifford algebra l20l [ZTTl , yet this algebra does not have 
the nice symmetry properties which enabled us to im- 
plement operations on the vector components above. It 
remains an exciting open question, whether such oper- 
ators form a good generalization, or whether we must 
continue our search for new properties. 
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APPENDIX 

SO(2n+l) structure. While the orthogonal group sym- 
metry of the "vector" component of the Clifford algebra, 
spanned by the generators , . . . , T 2n }, is usually cov- 
ered in textbook accounts, the symmetry of the extended 
set {r ,ri, . . . ,r 2n }, including the pseudo-scalar ele- 
ment, seems much less well-known. It is quite natu- 
ral to consider this set as all its elements mutually anti- 
commute, so any family K = (fci, . . . , k 2n ) of 2n pairwise 
distinct elements will generate the full Clifford algebra. 
Hence there exists a unitary U(IC) mapping the original 
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generators 1^ to the T kj : 

The initial observation is that indeed an orthogo- 
nal transformation T of the 2n generators extends to a 
special-orthogonal transformation T = (detT) © T of 
the extended set, since 

= U(T)r U(T)i = iT[ ■ ■■T' 2n = (detT)r . 

A nice and easy geometrical way of seeing this is via the 
higher-dimensional analogue of the well-known Euler 
angle parametrisation of orthogonal matrices (see [22 1): 



Euler Angle Decomposition 1231/ . Let T be an N x N or- 
thogonal matrix. Then there exist angles 6j k £ [0; 2ir) for 
1 < j < k < N , such that 

T = Ef ctT R jk (9 jk ), 

j<k 

where E\ = e|l)(l| + J2i>i b)0l zs either the identity or the 
reflection along the first coordinate axis, and Rj k (0) is the 
rotation by angle 8 in the plane spanned by the jth and kth 
coordinate axes, i.e. 

R ]k (9) = cos 9\j)(j\ +sm0\k)(j\ 

— sin^|i><fc| + cos 6»jA;><fe| + ^ 

(The product is to be taken in some fixed order of the indices, 
say lexicographically.) □ 

With this, we only have to understand how T trans- 
forms under the action of the elementary transforma- 
tions E\ and Rj k (9). Clearly, under the former, 

Io = er , 

while for the latter (using the abbreviations c = cos 6* 

and s = sin 6), 

v' — iV' ■ ■ ■ v' 

1 1 1 2n 

= w 1 ■ ■•r J -_i- 

(cTj + sr fc )r i+1 • ■■Tf.^-sTj + cT k )- 

= i(c 2 + s 2 )rv--r 2 „ 

+ i(~cs + sc)Tx ■ ■ - Tj-iTj+i ■ ■ - T k -iT k+1 ■ ■■T 2n 

= r . 

Now, for a general special-orthogonal transformation 
T of the 2n + 1 coordinates of the extended set, the Euler 
angle decomposition gives 

f= Y\_ R]k{0jk)- 

0<j<k<2n 



Then, the unitary representation U(T) clearly has to be 
the product of terms U(Rj k (9)). For 1 < j < k < 2n 
we know already what these are, as the transformation 
is only one of the generating set {r 1; . . . ,r 2 „} (and by 
the above observation the pseudo-scalar To is indeed left 
alone, as required); for = j < k < 2n on the other 
hand, we first map the generating set K. = {To, T k . . . .} 
to {Ti, . . .,r 2 „} by the unitary U{K)\ then apply the 
unitary belonging to R\2{9) and then map the genera- 
tors back via U(JC). This clearly implements 

U{R jk (6j) = U(K)U(R 12 (9))U{K)\ 



and we are done. 



□ 



Proof of Lemma 1. First, we show that there exists a uni- 
tary U such that p' = UpU^ has no pseudo-scalar, and 
only one nonzero vector component, say at T\, which 

we can choose to be g[ = JY^LoQj- Indeed, there is a 
special-orthogonal transformation T _1 of the coefficient 
vector (</o, ffi, • • • , ff2n) to a vector whose zeroeth as well 
as second till last components are all 0: since the length 
is preserved, this is consistent with the first component 

becoming y^i g]. 

Now, let U = U(T) be the corresponding unitary of 
the Hilbert space. By the above-mentioned representa- 
tion of SO(2n + 1) on Tt, we arrive at a new, simpler 
looking state 



or 



for some g'^ k , etc. 

There exist of course orthogonal transformations Fj 
that take T k to (— 1) jk T k . Such transformations flip 
the sign of a chosen Clifford generator. They can 
be extended to a special orthogonal transformation 
of span{r , . . . , r 2n } by also flipping the sign of T : 
FjTo = —To. (Using the geometry of the Clifford alge- 




bra it is easy to see that U(Fj) 
Now, consider 



r rj fulfills this task.) 



= \p' +\u{F j )p'U{F j )\ 



for j > 1. 

Clearly, if p' were a state, then the new operator p" 
would also be a state. We claim that p' has no terms 
with an index j in its Clifford basis expansion: Note that 
if we flip the sign of precisely those terms that have an 
index j (i.e., they have a factor Tj in the definition of 
the operator basis), and then the coefficients cancel with 
those of p'. 



7 



We now iterate this map through j = 2, 3, . . . , 2n, and 
we are left with a final state /5, which hence must be of 
the form 

p= l -{t+g' l T l ). 

By applying U {Ty from above, we now transform p to 
U{TypU{T) = P(p), which is the first part of the lemma. 

Looking at p once more, we see that this can be posi- 
tive semidefinite only if g[ < 1, i.e., J2jZo 9j - 1- 

Conversely, if J2j=o 9j — men me (Hermitian) op- 
erator A = J2j 9j^j has the property 

A 2 = Y j g j g k T j T k = Y J 9 2 j t<t, 

jk j 
i.e. -1 < A < t, so cr = i(l + A) > 0. □ 

Concavity of f(t) = H ( ld 2^ J • Straightforward calcu- 
lation shows that 

1 1 



/'(*) 



41n2 ^ 



(rn(l- Vt)-ln(l + Vt)), 



and so 



Since we are only interested in the sign of the second 
derivative, we ignore the (positive) factors in front of the 
bracket, and are done if we can show that 



g(t) := In 

= ln(l + Vt) 



1 + Vt _ 2y/t 

1- Vt - 

1 



_ - ln(l -Vt) r 

l + Vi V ' 1-V* 



is non-positive for < t < 1. Substituting s = 1 — \fi, 
which is also between and 1, we rewrite this as 

h(s) = -hxs-- + ln(2 - s) H — , 

s 2 — s 

which has derivative 

and this is clearly positive for < s < 1 . In other words, 
h increases from its value at s = (where it is h(0) = 
— oo) to its value at s = 1 (where it is h(l) = 0), so indeed 
h(s) < for allO < s < 1. 

Consequently, also /"(*) < for < t < 1, and we are 
done. □ 

Constructive proof of Lemma 1. For the interested 
reader, we now give an explicit construction of the uni- 
taries U (T) and U(Fj), which however requires a more 



intimate knowledge of the Clifford algebra. First of 
all, recall that we can write two vectors a, b £ R 2 ™ in 
terms of the generators of the Clifford algebra as a — 

Ylj=i a j^j an d b — J2j=i bjTj. The Clifford product of 
the two vectors is defined as ab = a-b + a/\b, where a A & 
is the outer product of the two vectors fl5l [161 . When 
using the matrix representation of the Clifford algebra 
given above, this product is simply the matrix product. 
Second, it is well known that within the Clifford algebra 
we may write the vector resulting from a reflection of the 
vector a on the plane perpendicular to the vector b (in 0) 
as — bab. Rotations can then be expressed as successive 
reflections |[T5lll6l . 

We first consider U(T). Here, our goal is to find 
the transformation U(T) that rotates the vector g — 
J2jZo9j^j t° the vector b = V£Ti, where we let £ := 
Y^j= o 9j • Finding such a transformation for only the first 
2n generators can easily be achieved. The challenge is 
thus to include To. To this end we perform three indi- 
vidual operations: First, we rotate g' = Y^Li 9j^j onto 
the vector b' = y/FVi with £' := Ylj=i9j- Second, we 
exchange T2 and IV And finally we rotate the vector 
g" = VfT 1 + 5o r 2 onto the vector b = V£T V 

First, we rotate g' = Y^j=i 9j^j on to the vector b' — 

y/t/Ti: Consider the vector g = ~^pg' ■ We have 

9 2 = I.<?| 2 1 = 1 an d thus the vector is of length 1. Let 
m = g + Ti denote the vector lying in the plane spanned 
by Ti and g located exactly half way between Ti and g. 

Let m = c(g + IM with c = , 1 ==. It is easy to 

V 2 ( 1 +9i/v^) 

.2 



verify that m = t and hence the vector rh has length 1 . 
To rotate the vector g' onto the vector b', we now need 
to first reflect g' around the plane perpendicular to rh, 
and then around the plane perpendicular to Y\. Hence, 
we now define R = Tifn. Evidently, R is unitary since 
RR) =R)R = t. First of all, note that 

Rg = Tirhg' 

= ^ (^' + ri ) 5 ' 

= cfr^ + rlg* 



1 



Hence, 



Rg'R) = 41'rhmYx = VJ'Y X = b' , 



as desired. Using the geometry of the Clifford algebra, 
one can see that fc-vectors remain fc-vectors when trans- 
formed with the rotation R |16|. Similarly, it is easy to 
see that Tq is untouched by the operation R 

i?r i? f = TqRR^ = T a , 
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since {r , Tj} = for all j e {1, . . . , 2n}. We can thus 
conclude that 



Rprf = l - ( 1 + VVT, + g T Q + 9' jk T jk 

j<k 



for some coefficients g'j k . 

Second, we exchange r 2 and To: To this end, recall 
that T 2 , . . . , r 2n , T is also a generating set for the Clif- 
ford algebra. Hence, we can now view T itself as a vec- 
tor with respect to the new generators. To exchange To 
and T 2 , we now simply rotate T onto T 2 . Essentially, 
this corresponds to a rotation about 90 degrees in the 
plane spanned by vectors To and T 2 . Consider the vec- 
tor n = r + r 2 located exactly in the middle between 
both vectors. Let n = n/^/2 be the normalized vector. 
Let R' = r 2 fi. A small calculation anlogous to the above 
shows that 

R'T R'i = T 2 and i?T 2 i?' t = -T . 

We also have that Ti, T 3 , . . . , T 2 „ are untouched by the 
operation: for j ^ and j ^ 2, we have that 

since {r , Tj} = {T 2 ,Tj} = 0. How does R' affect the k- 
vectors in terms of the original generators T\, . . . , T 2 „? 
Using the anti-commutation relations and the definition 
of Tq it is easy to convince yourself that all /c-vectors are 
mapped to fc'-vectors with k! > 2 (except for To itself). 
Hence, the coefficient of Ti remains untouched. We can 
thus conclude that 

R'RpRtR'i = - 1 + Vev 1 + 5o r 2 + a'jk^jk + ■ 



for some coefficients g" k 



j<k 



yjk- 

Finally, we now rotate the vector g" = + go^2 

onto the vector b. Note that (g") 2 = (£ + gl)t = it. 
Let g" — g" j\fl be the normalized vector. Our rotation 
is derived exactly analogous to the first step: Let k — 

g" + Yi, and let k = k/^2(l + VF/Vi). Let R" = Y x k. 
A simple calculation analogous to the above shows that 

R"g"R'^ = Ver lt 

as desired. Again, we have R'TkR"^ = Tfc for k ^= 1 and 
k ^ 2. Furthermore, fc -vectors remain fc-vectors under 
the actions of R" |16| . Summarizing, we obtain 

R"R'RprfR^R^ = i H + V£I\ + Y.J^jk + • • ■ j , 

for some coefficients g'" k . Thus, we can take U(T) = 
R"R'R. 

The argument for finding U (Fj) is analogous. A sim- 
ple computation using the fact that {r , Tj} — for all j 
gives us U(Fj) = r I\,-. 



